Sunday, June 8, 2008

Auto-Block SSH Intruder on Fedora7

From เมื่อถูก Brute-Force Attack ที่ sshd

Log in as root and type:
chmod 604 /var/log/secure
yum -y install denyhosts
service denyhosts start
chkconfig denyhosts on

Then DenyHosts will do its job. No need for maintenance.

You can view the blocked IP at:
/etc/hosts.deny


Activity log file is here:
/var/log/secure


The configuration of denyhosts is here:
/etc/denyhosts.conf

No comments: